Skip to content

Schneider-electric M580 Firmware vulnerabilities

schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +12 more +14 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that...CVE-2023-256206.5 MediumApril 19, 2023
schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +11 more +13 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2023-256197.5 HighApril 19, 2023
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of...CVE-2022-347655.5 MediumJuly 13, 2022
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...CVE-2022-347645.9 MediumJuly 13, 2022
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause...CVE-2022-347635.9 MediumJuly 13, 2022
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2022-347625.9 MediumJuly 13, 2022
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-476: NULL Pointer Dereference vulnerability exists that could cause a denial of service of...CVE-2022-347617.5 HighJuly 13, 2022
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists that could...CVE-2022-347607.5 HighJuly 13, 2022
schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause a denial of service of the...CVE-2022-347597.5 HighJuly 13, 2022
schneider-electric ecostruxure control expert, unity pro, modicon m340 firmware +1 more +3 moreA CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (...CVE-2020-74759.8 CriticalMarch 23, 2020
schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions), schneider-electric 140cpu65150 firmware, 140cpu65160 firmware +27 more +29 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2018-77947.5 HighJanuary 6, 2020
schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions), schneider-electric 140cpu65150 firmware, 140cpu65160 firmware +27 more +29 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2019-68577.5 HighJanuary 6, 2020
schneider electric se modicon m580, modicon m340, modicon quantum, modicon premium (see security notification for specific versions), schneider-electric 140cpu65150 firmware, 140cpu65160 firmware +27 more +29 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon...CVE-2019-68567.5 HighJanuary 6, 2020
schneider-electric modicon m340 firmware, modicon m580 firmware, tsxmcpc002m firmware +20 more +22 moreA CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon...CVE-2019-6851EPSS 29.1%7.5 HighOctober 29, 2019
schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...CVE-2019-68507.5 HighOctober 29, 2019
schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...CVE-2019-68497.5 HighOctober 29, 2019
schneider-electric modicon bmenoc 0311 firmware, modicon bmenoc 0321 firmware, modicon m580 firmware +2 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon BMENOC 0311, and...CVE-2019-6848EPSS 32.1%8.6 HighOctober 29, 2019
schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...CVE-2019-68474.9 MediumOctober 29, 2019
schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580,...CVE-2019-68466.5 MediumOctober 29, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, tsxmcpc002m firmware +20 more +22 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580,...CVE-2019-68457.5 HighOctober 29, 2019
schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...CVE-2019-68444.9 MediumOctober 29, 2019
schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...CVE-2019-68434.9 MediumOctober 29, 2019
schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...CVE-2019-68424.9 MediumOctober 29, 2019
schneider-electric modicon 140cra firmware, modicon bmxcra firmware, modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA...CVE-2019-6841EPSS 23.7%4.9 MediumOctober 29, 2019
schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists Modicon M580 (firmware version prior to V2.90)...CVE-2019-68287.5 HighSeptember 17, 2019
schneider electric modicon m340, schneider electric se modicon m580, modicon premium +5 more +7 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware versions prior to V2...CVE-2019-68097.5 HighSeptember 17, 2019
schneider electric modicon m340, schneider electric se modicon m580, schneider-electric modicon m340 firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in Modicon M580 (firmware version prior to V2...CVE-2019-68297.5 HighSeptember 17, 2019
schneider electric se modicon m580, schneider-electric modicon m580 firmware +1 moreA CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80,...CVE-2019-68305.9 MediumSeptember 17, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7844Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580,...CVE-2019-68089.8 CriticalMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2019-68077.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2019-68067.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78577.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78567.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78557.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7854Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-78537.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7852Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7845Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all...CVE-2018-78505.3 MediumMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580,...CVE-2018-78479.8 CriticalMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon...CVE-2018-7842Public exploitEPSS 35.0%9.8 CriticalMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7848Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7843Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon...CVE-2018-7849Public exploit7.5 HighMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all...CVE-2018-7846Public exploitEPSS 29.6%9.8 CriticalMay 22, 2019
schneider-electric 140cra312xxx firmware, bmx\/e cra firmware, m340 firmware +2 more +4 moreCWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon...CVE-2018-78516.5 MediumMay 22, 2019
schneider-electric modicon m340 firmware, modicon m580 firmware, modicon premium firmware +1 more +3 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists which could...CVE-2019-68197.5 HighMay 22, 2019
schneider-electric modicon m580 firmware, modicon m340 firmware, modicon premium firmware +1 more +3 moreCWE-330: Use of Insufficiently Random Values vulnerability, which could cause the hijacking of...CVE-2019-68216.5 MediumMay 22, 2019